General

  • Target

    Spotify Premium for PC v1.2.21.1104 [No Ads & Premium Unlocked] - (SpotifyGuru.com).exe

  • Size

    992KB

  • Sample

    240225-z4bgwace38

  • MD5

    d3368ef12e3fa29dae69112bc1cae347

  • SHA1

    9d4e9f65996e5e3fdadea22feb3e04f948c4de58

  • SHA256

    7a2fe2a78359d2c3d16492187841049cbfbf4185a2fe9ce6802c72ba0b9dfa6c

  • SHA512

    6d5fe4079eb9ed0268ecc140f792bd179005a9ba276a43569164cdb5feba3471612b11737081731c893e93bf21534569fd6bab1c5292c750da53ee7f415b3d70

  • SSDEEP

    12288:NKmZUzzNgnXwd7QHUGn9f5xovK7hWYhK49gElg3/mOdHWEICdxZOh:AmZUPNhQ0Gn9f5xXhWYU45a3/nW6dyh

Malware Config

Targets

    • Target

      Spotify Premium for PC v1.2.21.1104 [No Ads & Premium Unlocked] - (SpotifyGuru.com).exe

    • Size

      992KB

    • MD5

      d3368ef12e3fa29dae69112bc1cae347

    • SHA1

      9d4e9f65996e5e3fdadea22feb3e04f948c4de58

    • SHA256

      7a2fe2a78359d2c3d16492187841049cbfbf4185a2fe9ce6802c72ba0b9dfa6c

    • SHA512

      6d5fe4079eb9ed0268ecc140f792bd179005a9ba276a43569164cdb5feba3471612b11737081731c893e93bf21534569fd6bab1c5292c750da53ee7f415b3d70

    • SSDEEP

      12288:NKmZUzzNgnXwd7QHUGn9f5xovK7hWYhK49gElg3/mOdHWEICdxZOh:AmZUPNhQ0Gn9f5xXhWYU45a3/nW6dyh

    • Adds Run key to start application

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks